AM
Product
AutoCAD MAP 3D
by Autodesk · last CVE Aug 6, 2026
136
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 128Medium 2Low 1
Watch

Add AutoCAD MAP 3D to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-7406
7.8
0%
Aug 6
BMP File Parsing Untrusted Pointer Dereference in certain Autodesk products
Affected: 2027 before 2027.1
CVE-2026-16463
7.8
0%
Jul 29
DXF File Parsing Heap-Based Overflow in Autodesk AutoCAD
Affected: 2026 before 2026.1.2; 2027
CVE-2025-8894
7.8
0%
Sep 16
PDF File Parsing Heap-Based Buffer Overflow Vulnerability
Affected: 2026 before 2026.1; 2025 before 2025.1.3; 2024 before 2024.1.8; 2023 before 2023.1.8
CVE-2025-8893
7.8
0%
Sep 16
PDF File Parsing Out-of-Bounds Write Vulnerability
Affected: 2026 before 2026.1; 2025 before 2025.1.3; 2024 before 2024.1.8; 2023 before 2023.1.8
CVE-2025-5048
7.8
0%
Aug 15
DGN File Parsing Memory Corruption Vulnerability
Affected: 2026 before 2026.1; 2025 before 2025.1.3; 2024 before 2024.1.8; 2023 before 2023.1.8
CVE-2025-5047
7.8
0%
Aug 15
DGN File Parsing Uninitialized Variable Vulnerability
Affected: 2026 before 2026.1; 2025 before 2025.1.3; 2024 before 2024.1.8; 2023 before 2023.1.8
CVE-2025-5046
7.8
0%
Aug 15
DGN File Parsing Out-of-Bounds Read Vulnerability
Affected: 2026 before 2026.1; 2025 before 2025.1.3; 2024 before 2024.1.8; 2023 before 2023.1.8
CVE-2025-1276
7.8
0%
Apr 15
A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability
Affected: 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2
CVE-2025-1275
7.8
0%
Apr 15
A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability
Affected: 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2
CVE-2025-1652
7.8
0%
Mar 13
A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability
Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2
CVE-2025-1651
7.8
0%
Mar 13
A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability
Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2
CVE-2025-1650
7.8
0%
Mar 13
A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability
Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2
CVE-2025-1649
7.8
0%
Mar 13
A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability
Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2
CVE-2025-1433
7.8
0%
Mar 13
A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability
Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2
CVE-2025-1432
7.8
0%
Mar 13
A maliciously crafted 3DM file, when parsed through Autodesk AutoCAD, can force a Use-After-Free vulnerability
Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2
CVE-2025-1431
7.8
0%
Mar 13
A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability
Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2
CVE-2025-1430
7.8
0%
Mar 13
A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force a Memory Corruption vulnerability
Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2
CVE-2025-1429
7.8
0%
Mar 13
A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability
Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2
CVE-2025-1428
7.8
0%
Mar 13
A maliciously crafted CATPART file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability
Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2
CVE-2025-1427
7.8
0%
Mar 13
A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability
Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2
CVE-2024-7305
7.8
0%
Aug 20
A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability
Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.6; 2025 before 2025.1
CVE-2024-37007
7.8
0%
Jun 25
A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through Autodesk applications, can cause a use-after-free vulnerability
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1
CVE-2024-37006
7.8
0%
Jun 25
A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1
CVE-2024-37005
7.8
0%
Jun 25
A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can force an Out-of-Bound Read
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1
CVE-2024-37004
7.8
0%
Jun 25
A maliciously crafted SLDPRT file, when parsed in ASMKERN229A.dll through Autodesk applications, can cause a use-after-free vulnerability
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1
CVE-2024-37003
7.8
0%
Jun 25
A maliciously crafted DWG and SLDPRT file, when parsed in opennurbs.dll and ODXSW_DLL.dll through Autodesk applications, can be used to cause a Stack-based Overflow
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1
CVE-2024-36999
7.8
0%
Jun 25
A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Write
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1
CVE-2024-23159
7.8
0%
Jun 25
A maliciously crafted STP file, when parsed in stp_aim_x64_vc15d.dll through Autodesk applications, can be used to uninitialized variables
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1
CVE-2024-23158
7.8
0%
Jun 25
A maliciously crafted IGES file, when parsed in ASMImport229A.dll through Autodesk applications, can be used to cause a use-after-free vulnerability
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1
CVE-2024-23157
7.8
0%
Jun 25
A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1
CVE-2024-23156
7.8
0%
Jun 25
A maliciously crafted 3DM file, when parsed in opennurbs.dll and ASMkern229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access…
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1
CVE-2024-23155
7.8
0%
Jun 25
A maliciously crafted MODEL file, when parsed in atf_asm_interface.dll through Autodesk applications, can be used to cause a Heap-based Buffer Overflow
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1
CVE-2024-23154
7.8
0%
Jun 25
A maliciously crafted SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to cause a Heap-based Overflow
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1
CVE-2024-23153
7.8
0%
Jun 25
A maliciously crafted MODEL file, when parsed in libodx.dll through Autodesk applications, can force an Out-of-Bounds Read
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1
CVE-2024-23152
7.8
0%
Jun 25
A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Read
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1
CVE-2024-23151
7.8
0%
Jun 25
A maliciously crafted 3DM file, when parsed in ASMkern229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1
CVE-2024-23150
7.8
0%
Jun 25
A maliciously crafted PRT file, when parsed in odxug_dll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1
CVE-2024-37002
7.8
0%
Jun 25
A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1
CVE-2024-37001
7.8
0%
Jun 25
A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can be used to cause a Heap-based Overflow
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1
CVE-2024-37000
7.8
0%
Jun 25
A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memory corruption vulnerability by write access violation
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1
CVE-2024-23149
7.8
0%
Jun 25
A maliciously crafted SLDDRW file, when parsed in ODXSW_DLL.dll through Autodesk applications, can force an Out-of-Bound Read
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1
CVE-2024-23148
7.8
0%
Jun 25
A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1
CVE-2024-23147
7.8
0%
Jun 25
A maliciously crafted CATPART, X_B and STEP, when parsed in ASMKERN228A.dll and ASMKERN229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by…
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1
CVE-2024-23146
7.8
0%
Jun 25
A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1
CVE-2024-23145
7.8
0%
Jun 25
A maliciously crafted PRT file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bound Read
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1
CVE-2024-23144
7.8
0%
Jun 25
A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1
CVE-2024-23143
7.8
0%
Jun 25
A maliciously crafted 3DM, MODEL and X_B file, when parsed in ASMkern229A.dll and ASMBASE229A.dll through Autodesk applications, can force an Out-of-Bound Read and/or Out-of-Bound…
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1
CVE-2024-23142
7.8
0%
Jun 25
A maliciously crafted CATPART, STP, and MODEL file, when parsed in atf_dwg_consumer.dll, rose_x64_vc15.dll and libodxdll through Autodesk applications, can cause a use-after-free…
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1
CVE-2024-23141
7.8
0%
Jun 25
A maliciously crafted MODEL file, when parsed in libodxdll through Autodesk applications, can cause a double free
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1
CVE-2024-23140
7.8
0%
Jun 25
A maliciously crafted 3DM and MODEL file, when parsed in opennurbs.dll and atf_api.dll through Autodesk applications, can force an Out-of-Bound Read
Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1
Page 1 of 3 · 128 total